Threat Outbreak Alert: Email Messages with Malicious Attachment on April 24, 2014

Medium Alert ID: 33936 First Published: 2014 April 24 19:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment for the recipient. The email message attempts to convince the recipient to open the attachment for details...

Threat Outbreak Alert: Fake Financial Transaction Notification Email Messages on September 7, 2014

Medium Alert ID: 33856 First Published: 2014 April 18 20:03 GMT Last Updated: 2014 September 9 13:22 GMT Version: 10 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a financial transaction notification for the recipient. The text in th...

CVE-2014-2393

Cross-site scripting XSS vulnerability in Open-Xchange AppSuite 7.4.1 before 7.4.1-rev11 and 7.4.2 before 7.4.2-rev13 allows remote attackers to inject arbitrary web script or HTML via a Drive filename that is not properly handled during use of the composer to add an e-mail attachment...

Microsoft Publisher Out-of-bounds Array Index Code Execution (MS11-091) - Ver2 (CVE-2011-3410)

A remote code execution vulnerability has been reported in Microsoft Publisher. The vulnerability is caused when Microsoft Publisher does not properly handle values in memory while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by convincing a user to...

Threat Outbreak Alert: Fake Money Statement Notification Email Messages on April 13, 2014.

Medium Alert ID: 33764 First Published: 2014 April 14 15:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a money statement for the recipient. The text in the email message attempts to convince the recipient to open th...

Threat Outbreak Alert: Fake Malicious Attachment Notification Email Messages on April 7, 2014

Medium Alert ID: 33693 First Published: 2014 April 8 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a malicious attachment for the recipient. The email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Payment Notification Email Messages on April 7, 2014

Medium Alert ID: 33692 First Published: 2014 April 8 13:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment notification for the recipient. The email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Malicious Attachment Notification Email Messages on April 4, 2014

Medium Alert ID: 33663 First Published: 2014 April 7 14:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a malicious attachment for the recipient. The email message attempts to convince the recipient to open the...

Microsoft Windows TrueType Font Parsing Remote Code Execution (MS12-078) - Ver2 (CVE-2012-4786)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way Windows handles specially crafted TTF files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted web page or an email attachment...

Threat Outbreak Alert: Fake Product Order Shipment Notification Email Messages on March 17, 2014

Medium Alert ID: 33376 First Published: 2014 March 18 16:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product shipment notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Email Messages with Malicious Attachment on March 4, 2014

Medium Alert ID: 33171 First Published: 2014 March 5 14:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with a document attached for the recipient. The email message attempts to convince the recipient to open the attachment and view the...

Threat Outbreak Alert: Fake Price Adjustment Notification Email Messages on March 3, 2014

Medium Alert ID: 33157 First Published: 2014 March 3 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a price change notice from the Bank of Italy for the recipient. The text in the email message...

CVE-2014-2089

ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a certain clientid pathname...

CVE-2014-2089

ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a certain clientid pathname...

Code injection

ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a certain clientid pathname...

CVE-2014-2089

ILIAS 4.4.1 is affected by a remote code execution vulnerability that allows an attacker to create a .php file via a crafted email attachment, using a client_id pathname. Affected software: ILIAS

CVE-2014-2089

ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a certain clientid pathname...

Threat Outbreak Alert: Fake Invoice Notification Email Messages on February 25, 2014.

Medium Alert ID: 33050 First Published: 2014 February 26 18:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a invoice for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Sales Document Notification Email Messages on February 24, 2014

Medium Alert ID: 33021 First Published: 2014 February 25 19:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a sales document for the recipient. The text in the email message attempts to convince the recipient to open...

ILIAS 4.4.1 - Multiple Vulnerabilities

============================================================== Title ...| Multiple vulnerabilities in ILIAS Version .| ilias-4.4.1.zip Date ....| 21.02.2014 Found ...| HauntIT Blog Home ....| www.ilias.de ============================================================== First from admin user logged...